NewsThe Register — Security
London cops handed victim's new address and number to her stalker, watchdog says
Teaser from the source
Met ordered to improve safeguards after two preventable data breaches
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on victim's
Other advisories
- Not ratedosv:CVE-2026-105695Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session
- LowCVE-2026-65610nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment …
- HighCVE-2026-49396Nezha has cross-site GET request that can trigger stored cron commands on a victim's agents in github.com/nezhahq/nezha
- Not ratedosv:CVE-2026-49396Nezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agents
- HighCVE-2026-49396Nezha has cross-site GET request that can trigger stored cron commands on a victim's agents
- Not ratedosv:CVE-2026-45610WWBN AVideo plugin/LoginControl/set.json.php: 2FA toggle endpoint has no CSRF protection, letting an attacker page silently disable a logged-in victim's 2FA
- MediumCVE-2026-4293The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, whi…
- HighCVE-2026-8604In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in…
Other news entries
- Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account TokensNewsThe Hacker News
- Targeted ads installed Candiru spyware in zero-click attacksNewsBleepingComputer
- ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another AccountNewsThe Hacker News
- Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected AppsNewsThe Hacker News
- New AmnesiaStealer macOS malware hijacks browser sessions via remote controlNewsBleepingComputer
- Akira ransomware scum blocked victim's security tools – and broke their own encryptorNewsThe Register — Security
- Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID AccessNewsThe Hacker News
- Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected AccountsNewsThe Hacker News
ID